Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,217 total · sorted newest first- Sep 25, 2023
Malware in gradient-async
1 compromised version
- Sep 25, 2023
Malicious code in manhdzfca (npm)
- Sep 25, 2023
Malicious code in fca-rqzax-v3 (npm)
- Sep 25, 2023
Malicious code in fca-manhdz2004 (npm)
- Sep 25, 2023
Malware in manhdzfca
1 compromised version
- Sep 25, 2023
Malware in fca-rqzax-v3
1 compromised version
- Sep 25, 2023
Malware in fca-manhdz2004
1 compromised version
- Sep 25, 2023
Malicious code in fca-get (npm)
- Sep 25, 2023
Malicious code in fca-bot-asuna (npm)
- Sep 25, 2023
Malicious code in facebook-asuna-api (npm)
- Sep 25, 2023
Malicious code in chat-asuna-api (npm)
- Sep 25, 2023
Malicious code in chat-api-asuna (npm)
- Sep 25, 2023
Malicious code in bot-asuna-temp (npm)
- Sep 25, 2023
Malware in chat-asuna-api
1 compromised version
- Sep 25, 2023
Malware in fca-get
1 compromised version
- Sep 25, 2023
Malware in facebook-asuna-api
1 compromised version
- Sep 25, 2023
Malware in fca-bot-asuna
1 compromised version
- Sep 25, 2023
Malware in chat-api-asuna
1 compromised version
- Sep 25, 2023
Malware in bot-asuna-temp
1 compromised version
- Sep 25, 2023
Malware in lenskart
1 compromised version
- Sep 25, 2023
Malicious code in pykokalalz (PyPI)
1 compromised version
- Sep 25, 2023
Malicious code in pyioapso (PyPI)
1 compromised version
- Sep 24, 2023
Malicious code in company_package_my (npm)
2 compromised versions
- Sep 24, 2023
Malicious code in spaceboo-y (npm)
1 compromised version
- Sep 24, 2023
Malicious code in pyhjdddo (PyPI)
1 compromised version
- Sep 23, 2023
Malicious code in pytarlooko (PyPI)
- Sep 23, 2023
Malicious code in pyktrkatoo (PyPI)
1 compromised version
- Sep 22, 2023
Malicious code in @hnbi/searchfeuikit (npm)
1 compromised version
- Sep 22, 2023
Malicious code in @csmsce/msx-types (npm)
1 compromised version
- Sep 22, 2023
Malicious code in @ms-mwf/moray (npm)
1 compromised version
- Sep 22, 2023
Malicious code in @cosell/accountplan (npm)
2 compromised versions
- Sep 22, 2023
Malicious code in callhtm-p (npm)
2 compromised versions
- Sep 22, 2023
Malicious code in callhtmcall (npm)
1 compromised version
- Sep 22, 2023
Malicious code in lenskart (npm)
7 compromised versions
- Sep 22, 2023
Malicious code in rahad-remake-api (npm)
1 compromised version
- Sep 22, 2023
Malware in rahad-remake-api
1 compromised version
- Sep 22, 2023
Malicious code in circus-amd (npm)
1 compromised version
- Sep 22, 2023
Malicious code in pystallerer (PyPI)
1 compromised version
- Sep 22, 2023
Malicious code in pykooler (PyPI)
- Sep 21, 2023
Malicious code in amhairc-web (npm)
1 compromised version
- Sep 21, 2023
Malicious code in optimize-procurement-and-inventory-with-ai (npm)
2 compromised versions
- Sep 21, 2023
Malicious code in gatecrash (npm)
3 compromised versions
- Sep 21, 2023
Malicious code in telethon2 (PyPI)
- Sep 21, 2023
Malicious code in @zettle-bo/dashboard (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/dashboard
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/customers (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/customers
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/shell (npm)
1 compromised version
- Sep 21, 2023
Malicious code in @zettle-bo/pp-profile-widget (npm)
1 compromised version
- Sep 21, 2023
Malware in @zettle-bo/pp-profile-widget
1 compromised version
Page 6815 of 7,305